3310 FLASH ADRESSES

[QuantumII]

Hi!

What's the full flash area for a 3310 V 4.24 ?

is it 0020000 to 0040000 or 0020000 to 0060000

When i read out 0020000 to 0060000 Nfree says "Eeprom not found.."

I have to find the eeprom because the phone says "contact service" (After water damage)

Thank you very much!

[NokDoc]

For You it's too late I think, but this is the first time I see this sort of incorrect 'Flash' usage, hopefully it will works out four you.

Backup: 0020.0000-0040.0000
Full Flash: 0020.0000-003C.FFFF
MCU: 0020.0000-0032.FFFF
PPM: 0033.0000-003C.FFFF
Eeprom: 003D.0000-003D.FFFF or 003E.0000-003E.FFFF
PMM: 003F.0000-003F.FFFF

Your GirlFriend HairBlower?
Good Luck, Might be a good tip, the 'Contact Service'; NokDoc

[Abe]

start adresses are not correct...
NokDoc

Mcu is from 200000 to 330000 and all other lik e ppm is from 330000 to 3D0000...
not to 32FFFF or to 3CFFFF
because from 3CFFFF to 3D0000 you have another samll part of PPM package.....
if u dont flash the phone with that small part too...you damage your phone......

[Yasser]

Hi ABe!!


I didn't realise that point before. Because from the the address chart we all have, it doesn't say that.

Anyway. thanks for letting us know.

BR

Yasser

[||Joe]

i think the reason why it cant find the eeprom because it is already tampered. if u try to read it from nokia tool then youll see, maybe 000000/00/000000/0, ????:;/;:/???4??/5. etc.

[NokDoc]

Mr. Abe:

I hope your theory isn't right, but I must agree I did dum confusing thing there for the people who will use these Values for Backing Up just areas.

Hopefully you didn't notice yourself yet that in all the backups you made you'll even forgot the last byte yourself!!!
(go look for your byte at 40.0000 in a hex editor as you don't believe me)

To explain why I use the REAL Addresses:

This misunderstanding I think is due to the 'visual' values other programs as Dejan use.

Those aren't truly the adresses!

Dejan backups 1 byte less as the end address you'll type.

Though I know it's easier to use the values as everyone 'thinks' it should be but it'll change things at an incorrect address if only writing only 1 byte at the time.

Is in your opinion 33.0000 the last byte from the MCU or the First of the PPM?
Sure we're talking about the same byte?

Anyway an end address isn't required for writing and just as I suggested: Make a Full Backup from 20.0000-40.0000!

No regretz I hope, let me know if you found your byte at 40.0000, you earned it.
I do Fully Respect your work at this site!!, TanX & Continue.
Next Time I won't confuse people anymore without proper explanation, sorry.
NokDoc

--------------------------------------------------------------------------------------------------------------------
Mr QuantumII:

As long as the program works on the phone there's hope, it's still working!
Could still be a hardware problem, maybe Logomanager gives improper results, but it's worth trying.

First try to Read a Full Backup Flash!

Find the start of YOUR eeprom area, this should start with F0 F0 FF F8 and the string 'EEPROM' is also somewhere around there.

(Note: 1E could be 1D at your flash )
At the following addresses out there you can find:
1E.0032-1E.0039 these bytes contain the current ascii values of the IMEI.
1E.0162-1E0169 these bytes contain the current scrambled value of the IMEI.

A more experient flasher could tell you if your IMEI is 'Really' corrupted.
At the Root Page of this Site is the way to try it yourself, including the Formula for the socalled security imei.

If you'll pass that check we'll continue step 2, ok?

Hope soon, Good luck, NokDoc

[QuantumII]

Check out the attachment... it's the EEPROM dump of the 3310.. It's corrupted for sure!! Mostly FF FF .... But the phone hardware itself is working.. This is how i tested that :

1. Read full flash off a working 3310 v. 4.02
2. Wrote full flash from working 3310 4.02 into damaged 4.24
3. Now the phone started and asked for simcard. The charging also worked again(of course all the 4 locks went on)
4.wrote back the orginal v 4.24 full flash
5. Now it went back to contact service..

After a closer look in a hex editor I saw that the whole start of the damaged phone's eeprom were screwed...
But i still have it's orginal IMEI etc..

Is it possible for me to get him back running again ? I mean, If i get an eeprom dump from another 3310 with same version and pmm etc.. And i just replace the IMEI and calculate the checksums etc... Will I get a working phone ? Or do I have to do something else ?

Please help me =)

Thank you very much!

QII

[NokDoc]

That data isn;t eeprom data, for sure.
How to replace and repair the phone now is beyond my knowledge.
Follow the discussions on this forum anf find out.

Good Luck; NokDoc

[Iccang]

Hi QuantumII...

As you said, it's possible to make your phone 'live' again..
I have an experince with 3310 ver 4.35, that phone is ver 4.45 at the first, but I make downgrade with it to 4.35. I use the Nfree 1.2 to change the Imei at 4.35 like the original imei at 4.45. And then I rechecksum all and I save it to a new file. I wrote it to the phone.My phone is get 4 locks but I was unlocked with Rolis 4.71. My phone is still get no signal and resets for 30 seconds. So, I use logger by b-phreaks to make the log file. and then since I get back the log out from b-phreaks, I upload to the phone, and Voila! my phone is 'live' back again...

I hope you use make log file by b-phreaks and you send it to me. I'll send you back your log out file.. ok?

BR,

Iccang
======